<!DOCTYPE html><html lang="zh-CN" data-theme="light"><head><meta charset="UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no"><title>Mox的笔记库</title><meta name="keywords" content="Working"><meta name="author" content="MocusEZ"><meta name="copyright" content="MocusEZ"><meta name="format-detection" content="telephone=no"><meta name="theme-color" content="#ffffff"><meta name="description" content="探索未曾设想的道路">
<meta property="og:type" content="website">
<meta property="og:title" content="Mox的笔记库">
<meta property="og:url" content="https://www.mocusez.site/index.html">
<meta property="og:site_name" content="Mox的笔记库">
<meta property="og:description" content="探索未曾设想的道路">
<meta property="og:locale" content="zh_CN">
<meta property="og:image" content="https://www.mocusez.site/img/head.jpg">
<meta property="article:author" content="MocusEZ">
<meta property="article:tag" content="Working">
<meta name="twitter:card" content="summary">
<meta name="twitter:image" content="https://www.mocusez.site/img/head.jpg"><link rel="shortcut icon" href="/img/title.jpg"><link rel="canonical" href="https://www.mocusez.site/"><link rel="preconnect" href="//cdn.jsdelivr.net"/><link rel="preconnect" href="//hm.baidu.com"/><link rel="preconnect" href="//busuanzi.ibruce.info"/><link rel="stylesheet" href="/css/index.css"><link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/@fortawesome/fontawesome-free/css/all.min.css" media="print" onload="this.media='all'"><link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/@fancyapps/ui/dist/fancybox.min.css" media="print" onload="this.media='all'"><script>var _hmt = _hmt || [];
(function() {
  var hm = document.createElement("script");
  hm.src = "https://hm.baidu.com/hm.js?c85c9eaebc158345532b86397a6dded9";
  var s = document.getElementsByTagName("script")[0]; 
  s.parentNode.insertBefore(hm, s);
})();
</script><script>const GLOBAL_CONFIG = { 
  root: '/',
  algolia: undefined,
  localSearch: {"path":"/search.xml","preload":false,"languages":{"hits_empty":"找不到您查询的内容：${query}"}},
  translate: undefined,
  noticeOutdate: undefined,
  highlight: {"plugin":"highlighjs","highlightCopy":true,"highlightLang":true,"highlightHeightLimit":false},
  copy: {
    success: '复制成功',
    error: '复制错误',
    noSupport: '浏览器不支持'
  },
  relativeDate: {
    homepage: false,
    post: false
  },
  runtime: '天',
  date_suffix: {
    just: '刚刚',
    min: '分钟前',
    hour: '小时前',
    day: '天前',
    month: '个月前'
  },
  copyright: undefined,
  lightbox: 'fancybox',
  Snackbar: undefined,
  source: {
    justifiedGallery: {
      js: 'https://cdn.jsdelivr.net/npm/flickr-justified-gallery/dist/fjGallery.min.js',
      css: 'https://cdn.jsdelivr.net/npm/flickr-justified-gallery/dist/fjGallery.min.css'
    }
  },
  isPhotoFigcaption: false,
  islazyload: false,
  isAnchor: false
}</script><script id="config-diff">var GLOBAL_CONFIG_SITE = {
  title: 'Mox的笔记库',
  isPost: false,
  isHome: true,
  isHighlightShrink: false,
  isToc: false,
  postUpdate: '2023-10-21 12:23:56'
}</script><noscript><style type="text/css">
  #nav {
    opacity: 1
  }
  .justified-gallery img {
    opacity: 1
  }

  #recent-posts time,
  #post-meta time {
    display: inline !important
  }
</style></noscript><script>(win=>{
    win.saveToLocal = {
      set: function setWithExpiry(key, value, ttl) {
        if (ttl === 0) return
        const now = new Date()
        const expiryDay = ttl * 86400000
        const item = {
          value: value,
          expiry: now.getTime() + expiryDay,
        }
        localStorage.setItem(key, JSON.stringify(item))
      },

      get: function getWithExpiry(key) {
        const itemStr = localStorage.getItem(key)

        if (!itemStr) {
          return undefined
        }
        const item = JSON.parse(itemStr)
        const now = new Date()

        if (now.getTime() > item.expiry) {
          localStorage.removeItem(key)
          return undefined
        }
        return item.value
      }
    }
  
    win.getScript = url => new Promise((resolve, reject) => {
      const script = document.createElement('script')
      script.src = url
      script.async = true
      script.onerror = reject
      script.onload = script.onreadystatechange = function() {
        const loadState = this.readyState
        if (loadState && loadState !== 'loaded' && loadState !== 'complete') return
        script.onload = script.onreadystatechange = null
        resolve()
      }
      document.head.appendChild(script)
    })
  
      win.activateDarkMode = function () {
        document.documentElement.setAttribute('data-theme', 'dark')
        if (document.querySelector('meta[name="theme-color"]') !== null) {
          document.querySelector('meta[name="theme-color"]').setAttribute('content', '#0d0d0d')
        }
      }
      win.activateLightMode = function () {
        document.documentElement.setAttribute('data-theme', 'light')
        if (document.querySelector('meta[name="theme-color"]') !== null) {
          document.querySelector('meta[name="theme-color"]').setAttribute('content', '#ffffff')
        }
      }
      const t = saveToLocal.get('theme')
    
          if (t === 'dark') activateDarkMode()
          else if (t === 'light') activateLightMode()
        
      const asideStatus = saveToLocal.get('aside-status')
      if (asideStatus !== undefined) {
        if (asideStatus === 'hide') {
          document.documentElement.classList.add('hide-aside')
        } else {
          document.documentElement.classList.remove('hide-aside')
        }
      }
    
    const detectApple = () => {
      if(/iPad|iPhone|iPod|Macintosh/.test(navigator.userAgent)){
        document.documentElement.classList.add('apple')
      }
    }
    detectApple()
    })(window)</script><meta name="generator" content="Hexo 6.2.0"><link rel="alternate" href="/atom.xml" title="Mox的笔记库" type="application/atom+xml">
</head><body><div id="sidebar"><div id="menu-mask"></div><div id="sidebar-menus"><div class="avatar-img is-center"><img src="/img/head.jpg" onerror="onerror=null;src='/img/friend_404.gif'" alt="avatar"/></div><div class="sidebar-site-data site-data is-center"><a href="/archives/"><div class="headline">文章</div><div class="length-num">61</div></a><a href="/tags/"><div class="headline">标签</div><div class="length-num">0</div></a><a href="/categories/"><div class="headline">分类</div><div class="length-num">8</div></a></div><hr/><div class="menus_items"><div class="menus_item"><a class="site-page" href="/"><i class="fa-fw fas fa-home"></i><span> 首页</span></a></div><div class="menus_item"><a class="site-page" href="/archives/"><i class="fa-fw fas fa-archive"></i><span> 归档</span></a></div><div class="menus_item"><a class="site-page" href="/categories/"><i class="fa-fw fas fa-folder-open"></i><span> 分类</span></a></div><div class="menus_item"><a class="site-page" href="/link/"><i class="fa-fw fas fa-link"></i><span> 友链&amp;私人收藏</span></a></div><div class="menus_item"><a class="site-page" href="/board/"><i class="fa-fw fas fa-user"></i><span> 留言板</span></a></div></div></div></div><div class="page" id="body-wrap"><header class="full_page" id="page-header" style="background-image: url('/img/kali-2.0_kali-2.0-1920x1080.png')"><nav id="nav"><span id="blog_name"><a id="site-name" href="/">Mox的笔记库</a></span><div id="menus"><div id="search-button"><a class="site-page social-icon search"><i class="fas fa-search fa-fw"></i><span> 搜索</span></a></div><div class="menus_items"><div class="menus_item"><a class="site-page" href="/"><i class="fa-fw fas fa-home"></i><span> 首页</span></a></div><div class="menus_item"><a class="site-page" href="/archives/"><i class="fa-fw fas fa-archive"></i><span> 归档</span></a></div><div class="menus_item"><a class="site-page" href="/categories/"><i class="fa-fw fas fa-folder-open"></i><span> 分类</span></a></div><div class="menus_item"><a class="site-page" href="/link/"><i class="fa-fw fas fa-link"></i><span> 友链&amp;私人收藏</span></a></div><div class="menus_item"><a class="site-page" href="/board/"><i class="fa-fw fas fa-user"></i><span> 留言板</span></a></div></div><div id="toggle-menu"><a class="site-page"><i class="fas fa-bars fa-fw"></i></a></div></div></nav><div id="site-info"><h1 id="site-title">Mox的笔记库</h1><div id="site-subtitle"><span id="subtitle"></span></div><div id="site_social_icons"><a class="social-icon" href="https://github.com/mocusez" rel="external nofollow noreferrer" target="_blank" title="Github"><i class="fab fa-github"></i></a><a class="social-icon" href="mailto:285918468@qq.com" rel="external nofollow noreferrer" target="_blank" title="Email"><i class="fas fa-envelope"></i></a><a class="social-icon" href="/atom.xml" target="_blank" title="RSS"><i class="fas fa-rss"></i></a></div></div><div id="scroll-down"><i class="fas fa-angle-down scroll-down-effects"></i></div></header><main class="layout" id="content-inner"><div class="recent-posts" id="recent-posts"><div class="recent-post-item"><div class="post_cover left"><a href="/posts/3e9f.html" title="RMM观察与初探"><img class="post_bg" src="https://z1.ax1x.com/2023/10/21/piF47TA.md.png" onerror="this.onerror=null;this.src='/img/404.jpg'" alt="RMM观察与初探"></a></div><div class="recent-post-info"><a class="article-title" href="/posts/3e9f.html" title="RMM观察与初探">RMM观察与初探</a><div class="article-meta-wrap"><span class="post-meta-date"><i class="far fa-calendar-alt"></i><span class="article-meta-label">发表于</span><time datetime="2023-10-21T04:30:00.000Z" title="发表于 2023-10-21 12:30:00">2023-10-21</time></span><span class="article-meta"><span class="article-meta-separator">|</span><i class="fas fa-inbox"></i><a class="article-meta__categories" href="/categories/%E6%97%A5%E5%B8%B8%E7%AC%94%E8%AE%B0/">日常笔记</a></span></div><div class="content">RMM观察与初探工作&amp;毕设准备做的事情，最基本的信息收集还是要有的
介绍先看看ChatGPT怎么说;

RMM（远程监控和管理）是一种技术平台，旨在帮助IT服务提供商（MSP）远程监控和管理客户端的设备、网络和计算机。RMM可以帮助MSP深入了解客户网络，提供机器维护和更新，并主动解决问题，而无需亲自到客户的办公室。RMM的主要功能包括收集客户端信息、提供活动报告和数据、创建警报和门票（这里说的应该是票据）、跟踪网络和设备健康状况、同时监控多个端点和客户端，以及自动化计划维护任务[1]。
RMM的历史可以追溯到20世纪90年代初期，当时第一个标准网络管理工具与简单网络管理协议（SNMP）一起被广泛使用。随着技术的发展，RMM技术逐渐成熟，使得中小型企业和MSP能够利用类似于大型公司的管理服务[1]。
使用RMM的好处包括：

中小企业可以享受企业级自动化和监控的好处。
可在问题成为重大问题之前检测出来，避免系统故障。
IT服务提供商可以减少站点访问和相关成本。
客户每月支付固定费用以保持其IT系统正常运行。
通过主动维护实现最佳网络稳定性。
终端用户可以享受更长的正常运行时间， ...</div></div></div><div class="recent-post-item"><div class="post_cover right"><a href="/posts/5e44.html" title="计算机网络课设——UDP/TCP/TLS Socket实验"><img class="post_bg" src="https://s1.ax1x.com/2023/09/09/pP6qXOU.png" onerror="this.onerror=null;this.src='/img/404.jpg'" alt="计算机网络课设——UDP/TCP/TLS Socket实验"></a></div><div class="recent-post-info"><a class="article-title" href="/posts/5e44.html" title="计算机网络课设——UDP/TCP/TLS Socket实验">计算机网络课设——UDP/TCP/TLS Socket实验</a><div class="article-meta-wrap"><span class="post-meta-date"><i class="far fa-calendar-alt"></i><span class="article-meta-label">发表于</span><time datetime="2023-09-09T07:10:00.000Z" title="发表于 2023-09-09 15:10:00">2023-09-09</time></span><span class="article-meta"><span class="article-meta-separator">|</span><i class="fas fa-inbox"></i><a class="article-meta__categories" href="/categories/%E6%97%A5%E5%B8%B8%E7%AC%94%E8%AE%B0/">日常笔记</a></span></div><div class="content">计算机网络课设——UDP&#x2F;TCP&#x2F;TLS Socket实验2022年11月整的活儿。我看周围的人去网上去抄一篇C&#x2F;C++&#x2F;Java的Socket聊天实验室基本就能很好的把作业交差了，而我则选择用刚学的Go写一个用TLS加密Socket实验室。这几天整理了以下当时的代码，用GPT4生成使用TCP，UDP，TLS的Socker服务，重新温习一下Go语言的的操作。
TCPtcp_server.go
123456789101112131415161718192021222324252627282930313233package main // 声明main包import ( // 导入需要的包	&quot;bufio&quot; // 带缓冲的IO操作包	&quot;fmt&quot; // 格式化和打印	&quot;net&quot; // 网络操作包	&quot;strings&quot; // 字符串操作包)func main() &#123; // 主函数	fmt.Println(&quot;Starting server...&quot;) / ...</div></div></div><div class="recent-post-item"><div class="post_cover left"><a href="/posts/cd44.html" title="JQuery的XSS初探"><img class="post_bg" src="https://s1.ax1x.com/2023/09/08/pPyvO0O.jpg" onerror="this.onerror=null;this.src='/img/404.jpg'" alt="JQuery的XSS初探"></a></div><div class="recent-post-info"><a class="article-title" href="/posts/cd44.html" title="JQuery的XSS初探">JQuery的XSS初探</a><div class="article-meta-wrap"><span class="post-meta-date"><i class="far fa-calendar-alt"></i><span class="article-meta-label">发表于</span><time datetime="2023-09-08T04:30:00.000Z" title="发表于 2023-09-08 12:30:00">2023-09-08</time></span><span class="article-meta"><span class="article-meta-separator">|</span><i class="fas fa-inbox"></i><a class="article-meta__categories" href="/categories/%E6%97%A5%E5%B8%B8%E7%AC%94%E8%AE%B0/">日常笔记</a></span></div><div class="content">JQuery的XSS初探一年前上课时搜到的问题，当时正在学习JQuery开发
我对JQuery开发是不怎么感兴趣的：前后端分离项目都是清一色的Vue和React，前后端不分离也有Alpine.js，Layui这种更贴近原生JS的解决方案。这篇帖子旧纪录下我所看到的情况。
反正XSS（跨站脚本）不算洞，对吧🤣
CVE-2020-11022&#x2F;CVE-2020-11023https://vulnerabledoma.in/jquery_htmlPrefilter_xss.html
该靶场提供了有关CVE-2020-11022&#x2F;CVE-2020-11023的测试，影响范围从JQuery V1.2.0-V3.5.0 
复现代码：
123456789101112131415161718192021222324252627282930313233343536373839404142&lt;!DOCTYPE html&gt;&lt;html&gt;&lt;head&gt;    &lt;meta charset=&quot;utf-8&quot;&gt;    &lt;title ...</div></div></div><div class="recent-post-item"><div class="post_cover right"><a href="/posts/5862.html" title="生产实习记录"><img class="post_bg" src="https://s1.ax1x.com/2023/09/02/pPBH058.png" onerror="this.onerror=null;this.src='/img/404.jpg'" alt="生产实习记录"></a></div><div class="recent-post-info"><a class="article-title" href="/posts/5862.html" title="生产实习记录">生产实习记录</a><div class="article-meta-wrap"><span class="post-meta-date"><i class="far fa-calendar-alt"></i><span class="article-meta-label">发表于</span><time datetime="2023-09-02T13:51:00.000Z" title="发表于 2023-09-02 21:51:00">2023-09-02</time></span><span class="article-meta"><span class="article-meta-separator">|</span><i class="fas fa-inbox"></i><a class="article-meta__categories" href="/categories/%E6%97%A5%E5%B8%B8%E7%AC%94%E8%AE%B0/">日常笔记</a></span></div><div class="content">生产实习记录2023年6月学校安排去中软国际下属的一家公司进行生产实习。
个人觉得这次实习还是蛮有意思的：一个Hadoop开发项目。但首先于时间和参与项目的队友编程能力，在一点遗憾中结束了这次生产实习。
现在记录下当时的踩坑记录
Hadoop学习Windows环境下hadoop安装和配置详细步骤
在Windows下配置Hadoop环境的注意事项
1将C:\PROGRA~1\Java\jdk1.7.0_67 改为 D:\Softwares\jdk1.8（在环境变量设置中JAVA_HOME的值）(如果路径中有“Program Files”，则将Program Files改为 PROGRA~1）

看完教程后嫌麻烦，还是VMware装三台CentOS 7虚拟机完成Hadoop集群搭建。
搭建完成后，使用jps命令查看运行情况
Idea Hadoop配置Windows：IDEA配置Maven、Hadoop详细教程
1hadoop namenode -format



12export HADOOP_HOME=/root/hadoop-2.10.2export PATH=$PATH:$HADO ...</div></div></div><div class="recent-post-item"><div class="post_cover left"><a href="/posts/9a9b.html" title="Fedora-CoreOS配置与试用（2023年）"><img class="post_bg" src="https://s1.ax1x.com/2023/08/28/pPa8tlF.png" onerror="this.onerror=null;this.src='/img/404.jpg'" alt="Fedora-CoreOS配置与试用（2023年）"></a></div><div class="recent-post-info"><a class="article-title" href="/posts/9a9b.html" title="Fedora-CoreOS配置与试用（2023年）">Fedora-CoreOS配置与试用（2023年）</a><div class="article-meta-wrap"><span class="post-meta-date"><i class="far fa-calendar-alt"></i><span class="article-meta-label">发表于</span><time datetime="2023-08-28T11:35:00.000Z" title="发表于 2023-08-28 19:35:00">2023-08-28</time></span><span class="article-meta"><span class="article-meta-separator">|</span><i class="fas fa-inbox"></i><a class="article-meta__categories" href="/categories/%E6%97%A5%E5%B8%B8%E7%AC%94%E8%AE%B0/">日常笔记</a></span></div><div class="content">Fedora-CoreOS配置与试用（2023年）前言在前阵子CentOS停更之更新的争议期间发现的系统，其OVA文件不超过900MB，相比较于Ubuntu-Server的2GB和RockyLinux完整版的1.5GB的光盘文件要小不少。

默认安装Docker（但Docker-compose还是需要自己装）与Podman是我比较中意的一个点
抽空试了一下，于是就有了这篇文章
下载Fedora CoreOS采用滚动更新策略，直接选择当前最新的Stable即可

我自己习惯用的是VMware虚拟机，下载的就是OVA文件

虚拟机导入把OVA拖拽进入VMware就会自动进入导入界面，填完名称和存储路径就进入下一步

下面这个两个Ignation config折腾了好久
Provisioning Fedora CoreOS on VMware


看到资料上面说要example.ign是傻眼的，了解完Ignition这个玩意时是懵逼的
1Ignition is the utility used by Fedora CoreOS and RHEL CoreOS to manipulate di ...</div></div></div><div class="recent-post-item"><div class="post_cover right"><a href="/posts/7323.html" title="Electron学习笔记"><img class="post_bg" src="https://s1.ax1x.com/2023/08/27/pPUBMAe.png" onerror="this.onerror=null;this.src='/img/404.jpg'" alt="Electron学习笔记"></a></div><div class="recent-post-info"><a class="article-title" href="/posts/7323.html" title="Electron学习笔记">Electron学习笔记</a><div class="article-meta-wrap"><span class="post-meta-date"><i class="far fa-calendar-alt"></i><span class="article-meta-label">发表于</span><time datetime="2023-08-27T12:35:00.000Z" title="发表于 2023-08-27 20:35:00">2023-08-27</time></span><span class="article-meta"><span class="article-meta-separator">|</span><i class="fas fa-inbox"></i><a class="article-meta__categories" href="/categories/%E6%97%A5%E5%B8%B8%E7%AC%94%E8%AE%B0/">日常笔记</a></span></div><div class="content">前言这段时间在整理今年的资料。这篇文章记录于2023年初，当时的情况是要将网页端的内容移动到服务端，最省事省力的方案自然是用Electron解决(至于臃肿的问题，那就交给消费者自己去烦恼吧😂)
以下部分仅作记录，今天暂且就水一篇
安装修改.yarnrc
123registry &quot;https://registry.npmmirror.com&quot;ELECTRON_MIRROR &quot;https://npmmirror.com/mirrors/electron/&quot;ELECTRON_BUILDER_BINARIES_MIRROR &quot;https://npmmirror.com/mirrors/electron-builder-binaries/&quot;

Vue启动1234npm create electron-viteorgit clone https://github.com/electron-vite/electron-vite-vue然后yarn

Quick start123mkdir my-electron-app &amp;&amp ...</div></div></div><div class="recent-post-item"><div class="post_cover left"><a href="/posts/c415.html" title="ServerSentEvent学习"><img class="post_bg" src="https://s1.ax1x.com/2023/06/07/pCFLRLF.png" onerror="this.onerror=null;this.src='/img/404.jpg'" alt="ServerSentEvent学习"></a></div><div class="recent-post-info"><a class="article-title" href="/posts/c415.html" title="ServerSentEvent学习">ServerSentEvent学习</a><div class="article-meta-wrap"><span class="post-meta-date"><i class="far fa-calendar-alt"></i><span class="article-meta-label">发表于</span><time datetime="2023-06-07T14:10:00.000Z" title="发表于 2023-06-07 22:10:00">2023-06-07</time></span><span class="article-meta"><span class="article-meta-separator">|</span><i class="fas fa-inbox"></i><a class="article-meta__categories" href="/categories/%E6%97%A5%E5%B8%B8%E7%AC%94%E8%AE%B0/">日常笔记</a></span></div><div class="content">起因我记得我在高中时候问过老师：发送一次HTTP请求，能否收到多次HTTP请求回复。
老师的回答是：不能
直到我上了大学，2023年，不少ChatGPT聊天框的实现开始使用Server Sent Event（SSE）实现打字机样式的输出，我发现高中时的需求居然是可以实现的。在此之前，这一类需求我都是用WebSockets实现。Python的Flask和Django关于WebSockets属实让人不舒服，SpringBoot有关Websockets的配置也让我鼓弄了老半天（Java用的少是原罪）。但如果用SSE，回复只要按流式传输返回即可，个人感觉在理解上相对容易一些。
参考资料MDN里面关于实现有很详细的说明
Using server-sent events
阮一峰的教程，一份很好的普及资料
Server-Sent Events 教程
学校挑战杯实践记录在实践中发现：如果要从网页前端（通过摄像头录制视频）往后端传输视频，浏览器不提供视频压缩方案，且要么只能往后端通过流式传输每帧图片的Base64，要么就是通过Websockets传输每帧图片的Base64（本质上还是流式传输），这就让人 ...</div></div></div><div class="recent-post-item"><div class="post_cover right"><a href="/posts/b082.html" title="报告翻译：容器云的安全挑战"><img class="post_bg" src="https://s1.ax1x.com/2023/02/04/pSyMOTf.png" onerror="this.onerror=null;this.src='/img/404.jpg'" alt="报告翻译：容器云的安全挑战"></a></div><div class="recent-post-info"><a class="article-title" href="/posts/b082.html" title="报告翻译：容器云的安全挑战">报告翻译：容器云的安全挑战</a><div class="article-meta-wrap"><span class="post-meta-date"><i class="far fa-calendar-alt"></i><span class="article-meta-label">发表于</span><time datetime="2023-02-24T02:31:00.000Z" title="发表于 2023-02-24 10:31:00">2023-02-24</time></span><span class="article-meta"><span class="article-meta-separator">|</span><i class="fas fa-inbox"></i><a class="article-meta__categories" href="/categories/%E6%97%A5%E5%B8%B8%E7%AC%94%E8%AE%B0/">日常笔记</a></span></div><div class="content">报告翻译：容器云的安全挑战原文地址：https://ieeexplore.ieee.org/abstract/document/9750244
本文首发于看雪社区
随着k8s，微服务的兴起，容器的安全成为了需要研究的课题，这篇文章适合刚入门容器安全的新手，概述了容器云各个方面可能存在的攻击点。作者来自浙江大学与绿盟，发布于2022年。
文章将容器云的组成分成三个部分：调度层，容器层和内核层。 

容器的创建依赖Linux namespace，cgroup，seccomp还有权限控制。
漏洞点内核层漏洞点:

在内核层，内核漏洞会影响容器，调查显示，56.82%的内核漏洞都可以在容器中运行

在部署容器的时候，设置了危险的硬件访问权限从而导致越权

敏感数据通过内核泄露


容器层漏洞点：

Docker Engine的CVE-2018-15664，runc的CVE-2019-573，kata container的CVE-2020-2023
在部署容器的时候，没有设置CPU与内存的上限数，导致某几个容器将主机资源耗干
不安全的配置，如Docker打开了Docker daemon的2375 ...</div></div></div><div class="recent-post-item"><div class="post_cover left"><a href="/posts/1a9f.html" title="Vagrant配置Metarget靶场环境"><img class="post_bg" src="https://pic1.zhimg.com/v2-05c8d09d17483fad537d0907e0fcfd34_1440w.jpg?source=172ae18b" onerror="this.onerror=null;this.src='/img/404.jpg'" alt="Vagrant配置Metarget靶场环境"></a></div><div class="recent-post-info"><a class="article-title" href="/posts/1a9f.html" title="Vagrant配置Metarget靶场环境">Vagrant配置Metarget靶场环境</a><div class="article-meta-wrap"><span class="post-meta-date"><i class="far fa-calendar-alt"></i><span class="article-meta-label">发表于</span><time datetime="2023-01-09T15:03:00.000Z" title="发表于 2023-01-09 23:03:00">2023-01-09</time></span><span class="article-meta"><span class="article-meta-separator">|</span><i class="fas fa-inbox"></i><a class="article-meta__categories" href="/categories/%E6%97%A5%E5%B8%B8%E7%AC%94%E8%AE%B0/">日常笔记</a></span></div><div class="content">Vagrant配置Metarget靶场环境看了几天Docker原理，准备接触一下云原生安全，尝试一下建立云原生靶场
配置BoxArch Linux下
1pacman -s vagrant

拉取国内的ubuntu-cloud-images(北外源)
1vagrant box add https://mirrors.bfsu.edu.cn/ubuntu-cloud-images/bionic/current/bionic-server-cloudimg-amd64-vagrant.box --name ubuntu18    

先初始化
1vagrant init

修改Vagrantfile，要跟name一致
1config.vm.box = &quot;ubuntu18&quot;

ssh进去
1vagrant ssh

完成apt换源那一套(换北外源)
1234sudo sed -i &quot;s@http://.*archive.ubuntu.com@https://mirrors.bfsu.edu.cn@g&quot; /etc/apt/sources.listsudo  ...</div></div></div><div class="recent-post-item"><div class="post_cover right"><a href="/posts/1d2.html" title="OpenAI-whisper折腾"><img class="post_bg" src="https://s1.ax1x.com/2023/01/08/pSV7fr8.png" onerror="this.onerror=null;this.src='/img/404.jpg'" alt="OpenAI-whisper折腾"></a></div><div class="recent-post-info"><a class="article-title" href="/posts/1d2.html" title="OpenAI-whisper折腾">OpenAI-whisper折腾</a><div class="article-meta-wrap"><span class="post-meta-date"><i class="far fa-calendar-alt"></i><span class="article-meta-label">发表于</span><time datetime="2023-01-08T03:40:00.000Z" title="发表于 2023-01-08 11:40:00">2023-01-08</time></span><span class="article-meta"><span class="article-meta-separator">|</span><i class="fas fa-inbox"></i><a class="article-meta__categories" href="/categories/%E6%97%A5%E5%B8%B8%E7%AC%94%E8%AE%B0/">日常笔记</a></span></div><div class="content">OpenAI-whisper折腾好用的AI语音转录，最重要的是：免费
安装记录Python版本（官方版）
Git地址：
https://github.com/openai/whisper

启动环境
1pdm init


123pdm add torch torchvision torchaudio(国内特供)pdm add git+https://gitee.com/mirrors/openai-whisper.git

检测一下显卡是否正常，显示为True即可适用
123import torchprint(torch.__version__)print(torch.cuda.is_available())

麻了，GTX1650还跑不了medium（显存不够大），但跑个small还是可以的
这里有个WebUI的版本，这次没用上，这边先记录上
1https://huggingface.co/spaces/aadnk/whisper-webui

C++版本可以跑medium和large的版本，但速度慢肯定是没办法的
目前只提供民间支持，但由于其可以放在树莓派，手机上面跑，适用范围更 ...</div></div></div><nav id="pagination"><div class="pagination"><span class="page-number current">1</span><a class="page-number" href="/page/2/#content-inner">2</a><span class="space">&hellip;</span><a class="page-number" href="/page/7/#content-inner">7</a><a class="extend next" rel="next" href="/page/2/#content-inner"><i class="fas fa-chevron-right fa-fw"></i></a></div></nav></div><div class="aside-content" id="aside-content"><div class="card-widget card-info"><div class="is-center"><div class="avatar-img"><img src="/img/head.jpg" onerror="this.onerror=null;this.src='/img/friend_404.gif'" alt="avatar"/></div><div class="author-info__name">MocusEZ</div><div class="author-info__description">探索未曾设想的道路</div></div><div class="card-info-data site-data is-center"><a href="/archives/"><div class="headline">文章</div><div class="length-num">61</div></a><a href="/tags/"><div class="headline">标签</div><div class="length-num">0</div></a><a href="/categories/"><div class="headline">分类</div><div class="length-num">8</div></a></div><div class="card-info-social-icons is-center"><a class="social-icon" href="https://github.com/mocusez" rel="external nofollow noreferrer" target="_blank" title="Github"><i class="fab fa-github"></i></a><a class="social-icon" href="mailto:285918468@qq.com" rel="external nofollow noreferrer" target="_blank" title="Email"><i class="fas fa-envelope"></i></a><a class="social-icon" href="/atom.xml" target="_blank" title="RSS"><i class="fas fa-rss"></i></a></div></div><div class="card-widget card-announcement"><div class="item-headline"><i class="fas fa-bullhorn fa-shake"></i><span>公告</span></div><div class="announcement_content">迎接新的明天</div></div><div class="sticky_layout"><div class="card-widget card-recent-post"><div class="item-headline"><i class="fas fa-history"></i><span>最新文章</span></div><div class="aside-list"><div class="aside-list-item"><a class="thumbnail" href="/posts/3e9f.html" title="RMM观察与初探"><img src="https://z1.ax1x.com/2023/10/21/piF47TA.md.png" onerror="this.onerror=null;this.src='/img/404.jpg'" alt="RMM观察与初探"/></a><div class="content"><a class="title" href="/posts/3e9f.html" title="RMM观察与初探">RMM观察与初探</a><time datetime="2023-10-21T04:30:00.000Z" title="发表于 2023-10-21 12:30:00">2023-10-21</time></div></div><div class="aside-list-item"><a class="thumbnail" href="/posts/5e44.html" title="计算机网络课设——UDP/TCP/TLS Socket实验"><img src="https://s1.ax1x.com/2023/09/09/pP6qXOU.png" onerror="this.onerror=null;this.src='/img/404.jpg'" alt="计算机网络课设——UDP/TCP/TLS Socket实验"/></a><div class="content"><a class="title" href="/posts/5e44.html" title="计算机网络课设——UDP/TCP/TLS Socket实验">计算机网络课设——UDP/TCP/TLS Socket实验</a><time datetime="2023-09-09T07:10:00.000Z" title="发表于 2023-09-09 15:10:00">2023-09-09</time></div></div><div class="aside-list-item"><a class="thumbnail" href="/posts/cd44.html" title="JQuery的XSS初探"><img src="https://s1.ax1x.com/2023/09/08/pPyvO0O.jpg" onerror="this.onerror=null;this.src='/img/404.jpg'" alt="JQuery的XSS初探"/></a><div class="content"><a class="title" href="/posts/cd44.html" title="JQuery的XSS初探">JQuery的XSS初探</a><time datetime="2023-09-08T04:30:00.000Z" title="发表于 2023-09-08 12:30:00">2023-09-08</time></div></div><div class="aside-list-item"><a class="thumbnail" href="/posts/5862.html" title="生产实习记录"><img src="https://s1.ax1x.com/2023/09/02/pPBH058.png" onerror="this.onerror=null;this.src='/img/404.jpg'" alt="生产实习记录"/></a><div class="content"><a class="title" href="/posts/5862.html" title="生产实习记录">生产实习记录</a><time datetime="2023-09-02T13:51:00.000Z" title="发表于 2023-09-02 21:51:00">2023-09-02</time></div></div><div class="aside-list-item"><a class="thumbnail" href="/posts/9a9b.html" title="Fedora-CoreOS配置与试用（2023年）"><img src="https://s1.ax1x.com/2023/08/28/pPa8tlF.png" onerror="this.onerror=null;this.src='/img/404.jpg'" alt="Fedora-CoreOS配置与试用（2023年）"/></a><div class="content"><a class="title" href="/posts/9a9b.html" title="Fedora-CoreOS配置与试用（2023年）">Fedora-CoreOS配置与试用（2023年）</a><time datetime="2023-08-28T11:35:00.000Z" title="发表于 2023-08-28 19:35:00">2023-08-28</time></div></div></div></div><div class="card-widget card-categories"><div class="item-headline">
            <i class="fas fa-folder-open"></i>
            <span>分类</span>
            
            </div>
            <ul class="card-category-list" id="aside-cat-list">
            <li class="card-category-list-item "><a class="card-category-list-link" href="/categories/Arch-Linux%E6%8A%98%E8%85%BE/"><span class="card-category-list-name">Arch Linux折腾</span><span class="card-category-list-count">4</span></a></li><li class="card-category-list-item "><a class="card-category-list-link" href="/categories/CTF%E9%A2%98%E8%A7%A3/"><span class="card-category-list-name">CTF题解</span><span class="card-category-list-count">7</span></a></li><li class="card-category-list-item "><a class="card-category-list-link" href="/categories/Security%E7%AC%94%E8%AE%B0/"><span class="card-category-list-name">Security笔记</span><span class="card-category-list-count">2</span></a></li><li class="card-category-list-item "><a class="card-category-list-link" href="/categories/Termux%E7%AC%94%E8%AE%B0/"><span class="card-category-list-name">Termux笔记</span><span class="card-category-list-count">3</span></a></li><li class="card-category-list-item "><a class="card-category-list-link" href="/categories/%E5%AD%A6%E4%B9%A0%E8%B5%84%E6%96%99/"><span class="card-category-list-name">学习资料</span><span class="card-category-list-count">4</span></a></li><li class="card-category-list-item "><a class="card-category-list-link" href="/categories/%E6%97%A5%E5%B8%B8%E7%AC%94%E8%AE%B0/"><span class="card-category-list-name">日常笔记</span><span class="card-category-list-count">38</span></a></li><li class="card-category-list-item "><a class="card-category-list-link" href="/categories/%E6%B8%97%E9%80%8F%E6%B5%8B%E8%AF%95%E7%AC%94%E8%AE%B0/"><span class="card-category-list-name">渗透测试笔记</span><span class="card-category-list-count">1</span></a></li><li class="card-category-list-item "><a class="card-category-list-link" href="/categories/%E7%94%A8%E8%BF%87%E5%B0%B1%E4%B8%A2%E7%9A%84%E4%B8%9C%E8%A5%BF/"><span class="card-category-list-name">用过就丢的东西</span><span class="card-category-list-count">2</span></a></li>
            </ul></div><div class="card-widget card-archives"><div class="item-headline"><i class="fas fa-archive"></i><span>归档</span><a class="card-more-btn" href="/archives/" title="查看更多">
    <i class="fas fa-angle-right"></i></a></div><ul class="card-archive-list"><li class="card-archive-list-item"><a class="card-archive-list-link" href="/archives/2023/10/"><span class="card-archive-list-date">十月 2023</span><span class="card-archive-list-count">1</span></a></li><li class="card-archive-list-item"><a class="card-archive-list-link" href="/archives/2023/09/"><span class="card-archive-list-date">九月 2023</span><span class="card-archive-list-count">3</span></a></li><li class="card-archive-list-item"><a class="card-archive-list-link" href="/archives/2023/08/"><span class="card-archive-list-date">八月 2023</span><span class="card-archive-list-count">2</span></a></li><li class="card-archive-list-item"><a class="card-archive-list-link" href="/archives/2023/06/"><span class="card-archive-list-date">六月 2023</span><span class="card-archive-list-count">1</span></a></li><li class="card-archive-list-item"><a class="card-archive-list-link" href="/archives/2023/02/"><span class="card-archive-list-date">二月 2023</span><span class="card-archive-list-count">1</span></a></li><li class="card-archive-list-item"><a class="card-archive-list-link" href="/archives/2023/01/"><span class="card-archive-list-date">一月 2023</span><span class="card-archive-list-count">3</span></a></li><li class="card-archive-list-item"><a class="card-archive-list-link" href="/archives/2022/09/"><span class="card-archive-list-date">九月 2022</span><span class="card-archive-list-count">2</span></a></li><li class="card-archive-list-item"><a class="card-archive-list-link" href="/archives/2022/08/"><span class="card-archive-list-date">八月 2022</span><span class="card-archive-list-count">6</span></a></li></ul></div><div class="card-widget card-webinfo"><div class="item-headline"><i class="fas fa-chart-line"></i><span>网站资讯</span></div><div class="webinfo"><div class="webinfo-item"><div class="item-name">文章数目 :</div><div class="item-count">61</div></div><div class="webinfo-item"><div class="item-name">已运行时间 :</div><div class="item-count" id="runtimeshow" data-publishDate="2019-11-30T16:00:00.000Z"><i class="fa-solid fa-spinner fa-spin"></i></div></div><div class="webinfo-item"><div class="item-name">本站访客数 :</div><div class="item-count" id="busuanzi_value_site_uv"><i class="fa-solid fa-spinner fa-spin"></i></div></div><div class="webinfo-item"><div class="item-name">本站总访问量 :</div><div class="item-count" id="busuanzi_value_site_pv"><i class="fa-solid fa-spinner fa-spin"></i></div></div><div class="webinfo-item"><div class="item-name">最后更新时间 :</div><div class="item-count" id="last-push-date" data-lastPushDate="2023-10-21T04:23:56.038Z"><i class="fa-solid fa-spinner fa-spin"></i></div></div></div></div></div></div></main><footer id="footer"><div id="footer-wrap"><div class="copyright">&copy;2019 - 2023 By MocusEZ</div><div class="framework-info"><span>框架 </span><a target="_blank" rel="noopener external nofollow noreferrer" href="https://hexo.io">Hexo</a><span class="footer-separator">|</span><span>主题 </span><a target="_blank" rel="noopener external nofollow noreferrer" href="https://github.com/jerryc127/hexo-theme-butterfly">Butterfly</a></div><div class="footer_custom_text"><a href="http://beian.miit.gov.cn/" rel="external nofollow noreferrer"  style="color:#f72b07" target="_blank">闽ICP备2021003009号</a></div></div></footer></div><div id="rightside"><div id="rightside-config-hide"><button id="darkmode" type="button" title="浅色和深色模式转换"><i class="fas fa-adjust"></i></button><button id="hide-aside-btn" type="button" title="单栏和双栏切换"><i class="fas fa-arrows-alt-h"></i></button></div><div id="rightside-config-show"><button id="rightside_config" type="button" title="设置"><i class="fas fa-cog fa-spin"></i></button><button id="go-up" type="button" title="回到顶部"><i class="fas fa-arrow-up"></i></button></div></div><div id="local-search"><div class="search-dialog"><nav class="search-nav"><span class="search-dialog-title">搜索</span><span id="loading-status"></span><button class="search-close-button"><i class="fas fa-times"></i></button></nav><div class="is-center" id="loading-database"><i class="fas fa-spinner fa-pulse"></i><span>  数据库加载中</span></div><div class="search-wrap"><div id="local-search-input"><div class="local-search-box"><input class="local-search-box--input" placeholder="搜索文章" type="text"/></div></div><hr/><div id="local-search-results"></div></div></div><div id="search-mask"></div></div><div><script src="/js/utils.js"></script><script src="/js/main.js"></script><script src="https://cdn.jsdelivr.net/npm/@fancyapps/ui/dist/fancybox.umd.min.js"></script><script src="/js/search/local-search.js"></script><div class="js-pjax"><script>function subtitleType () {
  if (true) { 
    window.typed = new Typed("#subtitle", {
      strings: ["初看前路近可至，细思百事竞待忙","认知，信条，教导"],
      startDelay: 300,
      typeSpeed: 150,
      loop: true,
      backSpeed: 50
    })
  } else {
    document.getElementById("subtitle").innerHTML = '初看前路近可至，细思百事竞待忙'
  }
}

if (true) {
  if (typeof Typed === 'function') {
    subtitleType()
  } else {
    getScript('https://cdn.jsdelivr.net/npm/typed.js/lib/typed.min.js').then(subtitleType)
  }
} else {
  subtitleType()
}</script></div><script>(function(i,s,o,g,r,a,m){i["DaoVoiceObject"]=r;i[r]=i[r]||function(){(i[r].q=i[r].q||[]).push(arguments)},i[r].l=1*new Date();a=s.createElement(o),m=s.getElementsByTagName(o)[0];a.async=1;a.src=g;a.charset="utf-8";m.parentNode.insertBefore(a,m)})(window,document,"script",('https:' == document.location.protocol ? 'https:' : 'http:') + "//widget.daovoice.io/widget/1df8ba05.js","daovoice")
</script><script>var isChatBtn = false
daovoice('init', {
  app_id: '1df8ba05',},{
  launcher: { 
     disableLauncherIcon: isChatBtn // 悬浮 ICON 是否显示
  },
});
daovoice('update');

if (isChatBtn) {
  var chatBtnFn = () => {
    var chatBtn = document.getElementById("chat_btn")
    chatBtn.addEventListener("click", function(){
      daovoice('show')
    });
  }
  chatBtnFn()
} else {
  if (false) {
    function chatBtnHide () {
      daovoice('update', {},{
        launcher: { 
        disableLauncherIcon: true // 悬浮 ICON 是否显示
        },
      });
    }
    function chatBtnShow () {
      daovoice('update', {},{
        launcher: { 
        disableLauncherIcon: false // 悬浮 ICON 是否显示
        },
      });
    }
  }
}</script><script async data-pjax src="//busuanzi.ibruce.info/busuanzi/2.3/busuanzi.pure.mini.js"></script></div></body></html>